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i Appendix 1: General Server Program Node-Identification Algorithm 

3 if (local database contained a previous NIC address) 

4 { 

5 if (central DB has node with same current and previous NIC addresses) 

6 { 

7 // 

g // Central database already aware of the NIC change 

9 // 

10 Audit as existing node. 

11 } 

12 else if (central DB has node with same previous NIC address and same bios date) 

13 { 

14 // 

15 // NIC change or NIC swap since last audit; follow local database 

16 // 

n Audit as existing node, 

is Update central database with new NIC address. 

19 } 

20 else if (central DB has a node with same current address and same bios date) 

21 { 

22 // 

23 // HDD swap, local database is from another node; follow current NIC instead 

24 // 

2s Audit as existing node. 

26 } 



!if 27 else 



*" 28 { 

29 Insert as new node. 

* 30 } 

U 31 } 

H= 32 else 

m 33 { 

U 34 // 

iy 35 // No local database found on the node 

iC 36 // 

37 if (central DB has a node with same current NIC address and same bios date) 

38 { 

39 // 

40 // Local database lost; follow current NIC 

41 // 

42 Audit as existing node. 

43 } 

44 else 

45 { 

46 // 

47 // Node has not been audited before 

48 // 

49 Insert as new node. 

50 } 

51 } 
52 
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Appendix 2: Start-to-Finish Audit Algorithm 



****AGENT**** 

Try to detect the node's 'OEM serial number'... 

* Compaq BIOS call 

* DMI call 

Search for INI file(s) written during previous audit, 
if (any INI files found) 
{ 

Retrieve 'former NIC address' as it was during the previous audit. 
Note: INI files are timestamped so that we know which one is newer. 
} 

Try to detect 'current NIC address'... 

* IPX via Winsock 

* direct IPX call 

* NetBIOS call 

* VINES call 

* request GUID from Windows 

* search Windows registry 

* ask local Novell server 

if (no 'current NIC address' detected or found from previous audit) 
{ 

if (one or more local fixed disks are available to hold INI files) 
{ 

Generate a random 'current NIC address' for use until the real NIC address is detected. 
} 

} 

Create a "audit start request" message, containing (among other things): 

* current NIC address (or the temporary address if none) 

* former NIC address (from INI file, if any) 

* OEM serial number (if any) 

Send the "audit start request" message to the server. 
****SERVER**** 

Try to detect the node's NIC address from inside the server, by examining the node's NetWare 
connection, 
if (success) 
{ 

Discard the agent-detected 'current NIC address' in favor of that detected in the server. 
} 

Identify the node... 
{ 

if (auditing a NetWare file server) 
{ 
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54 


if (database has a file-server node with the same name) 




55 


{ // A server-node is identified strictly by its node-name, as opposed to the 




56 • 


// by its OEM serial no. or /NIC-address. This is because where file-servers 




57 


// are concerned, the name *is* a unique identifier. 




58 


} 




59 


} 




60 


else 




61 


{ 




62 


// 




63 


//Auditing a regular workstation 




64 


// 




65 


if (OEM serial number at least five characters long was detected) 




66 


{ 




67 


if (OEM serial found in database) 




68 


{ 




69 


Audit as existing node. 




70 


} 




71 


} 




72 


else if (NIC address available) 




73 


{ 




74 


if (hidden files contained a previous node address) 


y 


75 


{ 




76 


if (database has a node with same current and previous address) 


m 

3 W 


77 


{ 


SIB 


78 


// 


1-U 


79 


// Servers are already aware of the NIC change 




80 


// 


if% 


81 


Audit as existing node. 


.iuss. 


82 


} 




83 


else if (database has a node with same previous address and same bios date) 


Jens. 

jj s 


84 


{ 


'3 a 


85 


// 




86 


// NIC change or NIC swap since last audit; follow hidden files 




87 


// 


■'ISB? 


88 


Audit as existing node. 




89 


Update node address. 


ifl 


90 


} 




91 


else if (database has a node with same current address and same bios date) 




92 


{ 




93 


// 




94 


// HDD swap; follow current NIC 




95 


// 




96 


Audit as existing node. 




97 


} 




98 


else 




99 


{ 




100 


Insert as new node. 




101 


} 




102 


} 




103 


else 




104 


{ 




105 


// 




106 


// No hidden files found 




107 


// 
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108 if (database has a node with same current address and same bios date) 

109 { 

no // 

in // HDD reformat and ini files lost; follow NIC 

112 // 

1 13 Audit as existing node. 

114 } 

115 else 

116 { 

117 // 

118 // Node has not been audited before 

119 // 

120 Insert as new node. 

121 } 

122 } 

123 } 

124 else 

125 { 

126 // 

127 // No NIC, no local fixed drives; must be a lonely audit 

_ 128 // Here, the console must inject a node address into the rawfile 

to 129 // before uploading it, unless the rawfile 

ijj 130 // is to be identified by node-name only (a risky venture) 

•fij 131 // 

y 132 } 
y 133 } 
m 134 } 

m 135 

q 136 Send an "audit start reply" message back to the agent. 

J; 137 * The message includes the node's server-detected NIC address, if any. 

l=* 138 

*(1 139 ****AGENT**** 

hi- 140 

li! 141 Receive the "audit start reply" message from server. 

^ 142 

143 if ("audit start reply" message contains a 'current NIC address' as detected by the server) 

iy 144 { 

145 Discard any agent-determined 'current NIC address' 

146 in favor of the server-determined 'current NIC address'. 

147 } 
148 

149 if (one or more local fixed disks are available to hold INI files) 

150 { 

151 if (any INI files found) 

152 { 

153 if (INI file 'current NIC address' is different from the new 'current NIC address') 

154 { 

155 Retire INI file 'current NIC address' slot to the 'former NIC address' slot. 

156 Record 'current NIC address' to the INI file 'current NIC address' slot. 

157 Refresh INI file(s) with the current date and time. 

158 } 

159 else 

160 { 

161 The NIC address(es) recorded in the INI file(s) are still accurate. 
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162 Refresh INI file(s) with the current date and time. 

163 } 

164 } 

165 else 

166 { 

167 Record 'current NIC address' to new INI file(s) for use during future audits. 

168 } 

169 } 
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Appendix 3: Fake NIC Address Generation Algorithm 

void GenerateFakeNICAddress(U8 address[6]) 

{ 

// 

// Create a random NIC address for temporary use by a node that 
// cannot currently detect its own NIC address 

// 

// First three digits are our NIC address block, also known as 
// the ethernet vendor code. 

// 00-90-D4 is NETinventory's official address block as 
// assigned by IEEE on 06/24/1998. 

// 

address[0] = 0x00; 
address[1] = 0x90; 
address[2] = 0xD4; 

// 

// seed random number generator 

// 

srand((unsigned int)(time(NULL))); 

// 

// last three bytes of NIC address are random digits 

// 

address[3] = (U8)(rand() % 256); 
address[4] = (U8)(rand() % 256); 
address[5] = (U8)(rand() % 256); 
} 



H: 308075(6LPN02!.DOQ 



-29- 



